Vulnerabilities in solidtime-io

3 results

CVE-2026-33345MEDIUMsolidtime vulnerable to IDOR in private projectsEPSS 0.4%CVE-2026-42279MEDIUMsolidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUIDEPSS 0.3%CVE-2026-47236MEDIUMSolidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permissionEPSS 0.2%